2

I have instructions for setting up a proxy tunnel to a work computer behind a firewall. The setup is:

                        |
[home]--------[outside]-|-[inside]
                        |

The instructions are, from home:

  1. ssh -N -L 7000:inside:22 outside
  2. ssh -D 9999 -p 7000 localhost
  3. Setup a proxy for port 9999 on localhost

I should then be able to appear to the world as though I'm on [inside].

If I was on a mac or linux machine I assume I would do the first two steps in order at a terminal. In windows, I can't just open up an ssh terminal.

The putty tunnel configuration screen looks like this:

enter image description here

I have two questions:

  1. What would be the right settings for step 1?
  2. Is the 2nd step done in Putty as well, or from the shell connection in step 1?

Edit: This is what the main Putty screen looks like:

enter image description here

Localhost:7000

enter image description here

1 Answer 1

1

So to answer your second question first, yes, both steps are done from PuTTY.

First you need to setup a tunnel to outside using the "Local" radio button with the "Source Port" set to 7000 and the "Destination" set to inside:22.

Next, you would start another instance of PuTTY and use localhost:7000 as the host. On the tunnels tab, select the "Dynamic" radio button and set the "Source Port" to 9999.

Then, as before, configure your proxy to point to localhost:9999.

7
  • Thanks! Do I need to put anything in the "Destination" box for either step? Also, What do I put for hostname in step 2? See image added to question. Is it just outside again?
    – abalter
    Dec 18, 2015 at 4:04
  • @abalter, I've updated the answer to clarify
    – heavyd
    Dec 18, 2015 at 4:07
  • Putty won't connect when I have it set as in image above: hostname=localhost, port=7000. Isn't that kind of like asking to log on to my own machine at port 7000? I'm not running an ssh server.
    – abalter
    Dec 18, 2015 at 4:16
  • I just realized I wrote that wrong. The first step should have "Local" selected, not "Remote." I've updated the answer. This will open port 7000 on the local machine and forwarding it to inside:22 on the remote side of the tunnel
    – heavyd
    Dec 18, 2015 at 4:27
  • So does that take care of both steps at once?
    – abalter
    Dec 18, 2015 at 4:38

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .